Is arcadepadapp.vercel.app a scam? TrustSniffer's high-risk assessment: 16/100

Overview

This website is a single-page, token-themed landing page titled "$ARCADE — Claim Rewards," published on a free subdomain of a general-purpose application-hosting platform rather than on a dedicated domain. It presents a short block of promotional text built around claiming rewards for a token called $ARCADE. Its apparent purpose is to draw visitors into a token-reward or claim flow, a model that typically asks visitors to take a financial or credential-related action.

Scam/Impersonation Risk

The site carries confirmed contradictory signals and warrants a clearly cautionary reading. Multiple independent threat-reputation sources currently flag the site as malicious or suspicious, and the combination meets the threshold for a confirmed blacklist. The "claim rewards" framing is a well-known lure pattern in token-giveaway and reward-claim fraud. The site is also a subdomain of a major hosting platform's shared namespace, and its name closely resembles that platform's own domain, so it benefits by association from a trusted-looking parent without any operator identity behind it. Abuse reports exist for an address in the shared hosting range (85 in total). They concern infrastructure used by many unrelated customers, so they were discounted and are not attributed to this site. The blacklist and reputation findings stand on their own. No confirmed brand impersonation and no conflicting legal identities were observed. Behavioural testing found no wallet-connection prompts, wallet-drainer behaviour, clipboard tampering, hidden forms, or content cloaking. The page does generate heavy outbound traffic: 21 external data requests and 15 external submissions during testing, including a few to destinations outside the common, well-known services. This is consistent with a third-party-dependent claim flow and is not itself proof of abuse. Evidence:

• Homepage: titled "$ARCADE — Claim Rewards," with reward-claim framing and no identifiable operator.
• Reputation checks: two engines rated the site malicious and one suspicious, and the aggregate result is a confirmed blacklist.
• Browser behaviour test (three successful runs): 21 external data requests, 15 external submissions, 3 requests to non-whitelisted destinations, and no wallet-drainer, clipboard, or cloaking activity.
• Domain provenance: registered about 45 days ago (~0.12 years old), with a single archive snapshot, all in 2026 (1 year tracked).

Regulatory Verification Notes

The site discloses no company name, licence, registration number, or legal pages. The page content captured is one short landing page, so no terms, privacy, or about pages exist to assess. Real-world operator identity remains unverified, and ownership details are incomplete, so no legal entity can be tied to the token or the reward programme. A third-party broker-reputation lookup returned no match, so there is no external regulatory or reputational record to weigh in either direction. The site's technical hygiene is ordinary and gives no regulatory assurance. The transport certificate is valid, but it is a basic domain-validated one, which proves control of the address and nothing about who runs the service. Evidence:

• Homepage: no legal entity, licence, or registration disclosure, and no legal or policy pages captured.
• Transport encryption: certificate issued by WR1 (DV), valid to 2026-11-27 with 31 days remaining.
• Hosting: served from AS16509 (Amazon-02, Amazon.com, Inc., US), with the registry listed as ARIN.
• Third-party broker dataset: no match for this site.

What to Verify Next

Any claim that $ARCADE rewards exist should be checked through the token project's own channels, reached independently of this page, such as a publicly listed contract address on a block explorer and announcements from an established, separately verified social account. Reward claims should be confirmed through that route before any wallet or personal data is supplied here. Whether a registered entity stands behind the programme should be confirmed through the relevant corporate or financial-services registry. The official contact channels should be obtained from an independent source, not from this page. The current reputation-listing status should be rechecked before any future engagement, since remediation or further detections would change the picture. Evidence:

• Homepage: reward-claim wording that can be tested against the token's public on-chain record.
• Site content: no named operator, so no registry search key is available from the site itself.
• Reputation checks: current malicious and suspicious detections that should be rechecked over time.

Summary Verdict

The overall posture is elevated risk. Confirmed threat-reputation detections outweigh the site's clean technical hygiene and its stable page behaviour. A brand-new, anonymous reward-claim page cannot offset those detections. Legitimacy is not established, and the evidence is more consistent with a high-risk reward-claim property than with an established service.

Infrastructure Integrity

The site is served from Amazon-operated hosting behind a content-delivery layer. All eight observed addresses are edge nodes, and the true origin server is not visible. This protective layer is a mitigating factor only. It improves availability and resilience, but it prevents independent verification of where the site is actually hosted and can mask rapid content changes. It does not offset the reputation findings above.

Closing Assessment

Read-only viewing is the only appropriate use. No wallet should be connected, no credentials or personal details entered, and no payment, token approval, or transfer made through this site unless an independent, authoritative source confirms the programme.

Signals weighed against the site

• AbuseIPDB: 85 reports on hosting IP 64.29.17.3 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.